Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: HtJTUA0il96uWUspgDBxh09lMnMSjoHRqhB8PIFpS28=
Subject key identifier: AD:22:75:DB:B7:16:38:42:CB:85:9E:86:C2:0A:06:CB:08:66:20:AE
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 0194BC04ECD11CBBB8291E48983049D887E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 089E
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: Di6d0djM+7c6860pKBjLCD9snoME+rONKlAnU8A7d5g=)
2: Yz6JK1p8nAWa4yvE6SKtIQJ_V1c.roa (hash: rByHn6YmBo2+AfIQ5f6f0MI7t8+wl3rDT7243r2K7f4=)
3: wyMVR4dEtlYqNcQNudWP-vZ9cs4.roa (hash: 9/Au8AXYJlANsGCX+KV4wLuBFADmhxnPsp4Mf5t4/BA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ec:d1:1c:bb:b8:29:1e:48:98:30:49:d8:87:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=ad2275dbb7163842cb859e86c20a06cb086620ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:59:32:b2:5c:25:c0:ce:7b:e7:0b:f0:ec:
35:d7:d7:3b:1f:6a:f2:94:e5:2a:bb:4f:d5:11:34:
95:92:fe:b3:23:d7:6a:b8:93:0f:20:da:6f:cf:99:
a9:84:d8:f0:b8:9f:a7:1a:ab:78:f3:38:25:b7:0c:
7f:ca:2a:32:11:87:41:8e:51:e1:5d:8d:de:d1:83:
6d:57:4e:3a:2e:5b:2d:1b:17:4c:90:4f:6a:97:9b:
0e:dc:24:3b:e7:c9:d0:e4:44:d9:ee:24:36:4e:d3:
7e:f6:d4:38:9c:dd:ee:fc:bb:84:a6:91:f9:17:d0:
e2:31:c8:c2:9e:07:02:4c:2a:04:6f:8c:59:e7:57:
d9:36:64:81:18:5b:a9:50:8d:ba:55:a8:42:8a:bf:
98:2e:fa:80:bb:37:77:e2:99:a9:f1:a8:70:fa:10:
30:6d:4d:7d:a7:7a:8d:22:18:c3:e4:89:0f:17:46:
0e:29:59:ab:b6:63:8c:6e:e1:16:fc:c2:f3:6a:22:
24:38:af:72:f5:a5:78:ce:1f:ef:71:36:2f:42:10:
c9:e8:0f:94:95:5d:52:06:2e:df:aa:1d:0c:66:a9:
b9:b3:44:ab:2f:71:34:c1:8c:f3:45:2b:18:4b:e1:
82:a4:91:9b:69:1b:a3:ca:8d:7a:58:9e:91:93:29:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:22:75:DB:B7:16:38:42:CB:85:9E:86:C2:0A:06:CB:08:66:20:AE
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b9:5d:d0:e2:e1:da:a4:89:5d:0e:8e:14:e9:2c:90:4f:eb:
6a:0b:1b:fd:90:8f:e2:91:10:5e:42:96:0f:a7:69:1b:21:a1:
63:2a:c6:e2:46:d7:7a:9b:8f:bd:21:9e:e7:13:64:9f:b2:9b:
b6:fb:87:3d:bf:55:c8:85:7c:fc:3f:c4:7b:2d:a1:da:b4:6c:
e9:02:51:2d:c9:7c:6b:71:f4:34:2c:25:8d:17:62:32:5d:4c:
9a:1c:18:c2:13:9f:26:14:14:18:a1:0d:fe:12:a8:ab:54:14:
b1:7d:14:c9:fc:90:9b:30:b3:c9:00:7f:42:e9:f7:c2:46:78:
11:85:41:9f:43:2c:a7:e8:cc:d2:2a:b1:02:35:ba:16:30:d1:
0a:da:c7:85:bc:95:48:5f:f6:cb:70:29:cb:4d:ee:d6:f3:fa:
ec:94:32:cc:c5:bb:ca:c7:29:b9:64:22:bf:4b:0e:b7:d3:65:
56:c1:b6:3d:fe:5e:86:06:32:f7:74:60:ab:97:02:b5:f6:76:
77:61:c1:d0:bc:5b:a8:4d:d5:b0:cd:14:16:f2:65:fb:54:b3:
7b:26:87:53:56:15:e8:21:24:3c:b1:c1:a4:b8:bd:31:fa:76:
40:da:7d:07:94:93:a8:fe:a4:c6:97:4d:c8:8a:91:f9:23:bb:
35:23:c3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:17 2025 by rpki-client